Separate disabled applications from enabled applications
Installed system and third-party applications can be disabled.
They can be enabled at any time, but I expect that the majority of disabled applications stay disabled for a long time, so they would just uselessly clutter the list of apps to protect or not protect in the Tor VPN.